One orchestrator. Dozens of sub-agents.
One accountability chain.
Trust Layer's sub-agent delegation model extends the accountability chain one level down — without requiring a separate human sign-off for every child. The full audit trail is in the JWT.
Who this is for
How It Works
Delegation with a cryptographic paper trail.
Parent credentials, child scopes, cascade revocation — the entire chain is encoded in the JWT and enforced automatically.
Mark the parent as delegation-enabled
Register the orchestrator with can_spawn_subagents: true. This is declared by the org at enrollment — not self-asserted by the agent.
Sub-agents register under the parent
Each child agent registers under its parent. Trust Layer validates the parent is active, delegation-enabled, and not itself a sub-agent — and that the child's scopes are a strict subset of the parent's.
Trust is capped and credentials are linked
A sub-agent's trust level cannot exceed the parent's. The child's credential carries the parent reference, so downstream systems know the full delegation chain from the signed credential alone.
Cascade suspension enforced automatically
Every delegation fires an agent.subagent_spawned webhook. If the parent is suspended or retired — for any reason — all its sub-agents are cascade-suspended automatically. One revocation cleans up the whole tree.
Built-In
Compliance that scales with your pipeline depth.
Scope inheritance enforcement
Child agents can only operate within a strict subset of the parent's declared scopes. No privilege escalation. Enforced at registration, not runtime.
Trust level capping
A sub-agent's trust level cannot exceed its parent's. STRONG parent = STRONG maximum for children, regardless of their own declaration completeness.
Delegation webhooks
Every agent.subagent_spawned event fires a webhook to your org. Full visibility into when and what your orchestrators are spawning — in real time.
Cascade suspension
Suspend or retire the parent and the entire sub-agent tree is suspended automatically. One action to shut down a compromised pipeline — no manual child cleanup.
Eniyan
Start shipping verifiable trust.
Today. On a free plan.
Pick one product or all three. No credit card to start. Switch or combine whenever you're ready.